Kerberos Authentication not working for few Users with ERROR "Caused by: KrbException: Field is too long for this implementation (61)"

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

Kerberos Authentication not working for few Users with ERROR "Caused by: KrbException: Field is too long for this implementation (61)"

ckhuntia
Hello Team,
Could you please provide some inputs on this error? Few of our users are not able to access SQL Server DB through kerberos Auth. They are agetting folloing ERROR.

------------------------------------------------------------------------------------------
com.microsoft.sqlserver.jdbc.SQLServerException: Integrated authentication failed. ClientConnectionId:0e381a97-4705-4e9a-a1ec-0cffc72b2aad
        at com.microsoft.sqlserver.jdbc.SQLServerConnection.terminate(SQLServerConnection.java:1667)
        at com.microsoft.sqlserver.jdbc.KerbAuthentication.intAuthHandShake(KerbAuthentication.java:231)
        at com.microsoft.sqlserver.jdbc.KerbAuthentication.GenerateClientContext(KerbAuthentication.java:270)
        at com.microsoft.sqlserver.jdbc.SQLServerConnection.sendLogon(SQLServerConnection.java:2691)
        at com.microsoft.sqlserver.jdbc.SQLServerConnection.logon(SQLServerConnection.java:2234)
        at com.microsoft.sqlserver.jdbc.SQLServerConnection.access$000(SQLServerConnection.java:41)
        at com.microsoft.sqlserver.jdbc.SQLServerConnection$LogonCommand.doExecute(SQLServerConnection.java:2220)
        at com.microsoft.sqlserver.jdbc.TDSCommand.execute(IOBuffer.java:5696)
        at com.microsoft.sqlserver.jdbc.SQLServerConnection.executeCommand(SQLServerConnection.java:1715)
        at com.microsoft.sqlserver.jdbc.SQLServerConnection.connectHelper(SQLServerConnection.java:1326)
        at com.microsoft.sqlserver.jdbc.SQLServerConnection.login(SQLServerConnection.java:991)
        at com.microsoft.sqlserver.jdbc.SQLServerConnection.connect(SQLServerConnection.java:827)
        at com.microsoft.sqlserver.jdbc.SQLServerDriver.connect(SQLServerDriver.java:1012)
        at com.spotfire.server.util.sql.DriverWrapper.connect(DriverWrapper.java:63)
        at com.spotfire.server.util.sql.KerberosDataSource$1.run(KerberosDataSource.java:321)
        at com.spotfire.server.util.sql.KerberosDataSource$1.run(KerberosDataSource.java:318)
        at java.security.AccessController.doPrivileged(Native Method)
        at javax.security.auth.Subject.doAs(Subject.java:415)
        at com.spotfire.server.util.sql.KerberosDataSource.createConnection(KerberosDataSource.java:318)
        at com.spotfire.server.util.sql.KerberosDataSource.getConnection(KerberosDataSource.java:297)
        at com.spotfire.ws.im.ds.sql.JDBCDataSourceManager.getDelegatedKerberosConnection(JDBCDataSourceManager.java:1416)
        at com.spotfire.ws.im.ds.sql.JDBCDataSourceManager.getConnection(JDBCDataSourceManager.java:1357)
        at com.spotfire.ws.im.ds.sql.JDBCContextImpl.getConnection(JDBCContextImpl.java:117)
        at com.spotfire.ws.im.ds.sql.SQLDataSource.init(SQLDataSource.java:206)
        ... 74 more
Caused by: GSSException: No valid credentials provided (Mechanism level: Field is too long for this implementation (61))
        at sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:710)
        at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:248)
        at sun.security.jgss.GSSContextImpl.initSecContext(GSSContextImpl.java:179)
        at com.microsoft.sqlserver.jdbc.KerbAuthentication.intAuthHandShake(KerbAuthentication.java:210)
        ... 96 more
Caused by: KrbException: Field is too long for this implementation (61)
        at sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:70)
        at sun.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:192)
        at sun.security.krb5.KrbTgsReq.sendAndGetCreds(KrbTgsReq.java:203)
        at sun.security.krb5.internal.CredentialsUtil.serviceCreds(CredentialsUtil.java:311)
        at sun.security.krb5.internal.CredentialsUtil.acquireServiceCreds(CredentialsUtil.java:115)
        at sun.security.krb5.Credentials.acquireServiceCreds(Credentials.java:442)
        at sun.security.jgss.krb5.Krb5Context.initSecContext(Krb5Context.java:641)
        ... 99 more
Caused by: KrbException: Identifier doesn't match expected value (906)
        at sun.security.krb5.internal.KDCRep.init(KDCRep.java:143)
        at sun.security.krb5.internal.TGSRep.init(TGSRep.java:66)
        at sun.security.krb5.internal.TGSRep.<init>(TGSRep.java:61)
        at sun.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:55)
        ... 105 more
-------------------------------------------------------------------------------------

What is this error "Caused by: KrbException: Field is too long for this implementation (61)" is for ?